Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa
File:                     c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa (raw, json)
Hash identifier:          Nw8K+LGRekXQRAtIMKho7BD9FlItpYwmSDoF9eRE650=
Subject key identifier:   B0:BE:2F:D9:C7:B4:C8:9E:01:EC:3B:A8:AB:14:93:04:37:3F:15:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48A7C641565EBA0BB376633263EDCB8BF3B074EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa
Signing time:             Sat 02 Aug 2025 00:31:03 +0000
ROA not before:           Sat 02 Aug 2025 00:31:03 +0000
ROA not after:            Sat 06 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.194.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a7:c6:41:56:5e:ba:0b:b3:76:63:32:63:ed:cb:8b:f3:b0:74:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  2 00:31:03 2025 GMT
            Not After : Sep  6 23:59:59 2025 GMT
        Subject: serialNumber=9e7207a1ba84f4cdaa548bd73a7c553c9438c257395ff0b312858a4903d0b3ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:80:51:99:97:e6:e0:ed:47:7a:8f:3e:29:24:
                    7f:a9:46:2c:2d:fc:92:10:83:47:3e:78:60:4a:72:
                    79:55:51:f9:69:39:72:73:f4:40:af:4e:21:9d:7d:
                    d4:e2:72:bb:ce:02:27:c5:d5:db:df:82:f9:9b:b0:
                    0b:36:c9:18:5e:0c:64:bb:93:30:36:cb:df:f8:3e:
                    31:d3:db:9a:2b:50:d4:3a:2d:45:85:8c:fa:ae:98:
                    09:58:c7:ad:fd:40:94:80:60:6b:e6:c9:14:30:8c:
                    d2:85:5b:b2:95:e5:a1:e3:3b:93:e5:c1:14:f6:62:
                    64:24:6c:26:8a:9e:25:c5:d3:72:5d:7c:ba:5e:57:
                    39:71:39:34:df:1a:d4:9c:4e:04:f0:83:86:74:8a:
                    dd:4e:6a:52:b9:4c:93:44:95:9c:61:b2:1f:ed:0d:
                    f2:ba:dd:9e:c3:f0:4f:7e:18:a1:87:a0:0d:60:0d:
                    46:b2:33:f5:a5:22:7a:bd:d9:d6:3e:d6:a8:f9:24:
                    73:04:48:1a:18:eb:0f:cd:c8:bf:18:c9:94:a0:23:
                    b2:ee:ba:56:8a:cd:b1:1e:99:47:a1:a1:55:c4:11:
                    de:77:13:10:b6:e1:f9:0f:39:84:61:a7:68:2e:4d:
                    e6:bc:25:76:c3:44:bb:01:dc:cb:4e:79:aa:ea:e9:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:2F:D9:C7:B4:C8:9E:01:EC:3B:A8:AB:14:93:04:37:3F:15:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c47ed4c8-aa67-496c-9b5b-0bd92c0e3008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:43:50:2f:fe:76:ba:5f:aa:2c:27:4c:55:60:37:d3:f5:
         4d:f9:14:f9:af:02:44:bd:a3:c6:1d:62:94:fe:9c:e6:64:09:
         90:ef:b1:f4:8d:bc:4b:e2:b9:68:1c:55:96:66:45:ff:4c:19:
         ca:de:a4:07:4a:e1:28:65:32:ee:43:fd:3b:ae:2b:9f:63:65:
         f6:94:27:db:9b:f6:aa:44:eb:54:a8:e6:90:b0:9f:c7:5e:ac:
         c7:9e:3f:d7:3b:96:e7:94:cb:3a:03:0a:a1:ea:f4:2f:4c:01:
         37:61:17:9f:cf:0c:17:d6:e7:0b:f5:07:1f:91:70:de:06:8c:
         f3:d7:e0:ab:e2:6f:cf:22:ac:2b:64:74:b1:5c:52:bf:27:ad:
         cd:cd:dc:6f:6b:70:d4:fc:21:05:3f:11:68:de:3b:ad:83:31:
         d5:07:75:e7:84:34:9a:ab:2a:e4:43:0b:19:af:07:84:19:6e:
         8c:fe:44:e1:af:e8:b9:02:73:93:55:3d:39:33:ab:c7:45:ec:
         0f:ca:97:a4:d2:11:60:04:48:3d:fb:b7:f4:7e:40:51:8d:6c:
         81:33:f8:94:cc:f4:c1:2a:3d:99:ef:ee:91:76:f7:16:83:0a:
         9c:70:16:04:95:dc:ec:84:f4:3a:de:c3:75:0f:b2:94:8c:ce:
         e1:69:32:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:39:57 2025 by rpki-client